Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File:                     dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier:          ZKwZXSl6uE9eCDb3R3Gdg/igiDt+jBxfVGyUB/JT8+w=
Subject key identifier:   0B:F0:98:58:CD:FA:8B:88:AB:27:8C:5D:48:8F:B2:0D:4E:B0:FC:A5
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       01987C09F923CAE1B516E801748190CE9D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number:          1620
Signing time:             Tue 05 Aug 2025 21:01:25 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:25 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:25 +0000
Files and hashes:         1: 0oXrffU-rSHDpr6TX7IphO7-POk.roa (hash: WbRM1hyDPFlmbx1lM12Y7DHbqSzxb6BFvKIPhKhJrRs=)
                          2: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (hash: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=)
                          3: RL1wLq44Bf2ikyDTpOd16y5e10g.roa (hash: X39FqUvCzgp1Twm8EXglBTxwVJ18DwP2RWSMPjQDYfw=)
                          4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: Al2Hnlxe/LSX/d5LhuEqjyf1Gd200L9K+4RO6p6JNEU=)
                          5: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (hash: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:f9:23:ca:e1:b5:16:e8:01:74:81:90:ce:9d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: Aug  5 21:01:25 2025 GMT
            Not After : Aug  6 21:01:25 2025 GMT
        Subject: CN=0bf09858cdfa8b88ab278c5d488fb20d4eb0fca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:6e:f0:05:11:5a:a3:7b:b7:18:89:c1:ce:
                    fe:bf:f3:8a:21:6d:21:f0:8f:09:77:2e:b5:33:94:
                    b7:86:ac:a4:06:b3:0d:9f:5f:06:1b:55:4b:39:93:
                    d4:2f:f2:01:f4:06:57:07:bc:9b:fc:fe:f4:a2:1e:
                    3d:fc:3d:98:9d:f6:92:ae:da:6f:fa:9c:be:59:10:
                    9d:30:6d:af:6a:95:10:f0:fe:2a:3e:cb:dc:7f:93:
                    a2:45:aa:a0:1c:b0:f3:9f:ff:f9:c7:98:a2:39:95:
                    d3:03:8d:79:fe:28:67:db:c7:06:41:9c:ce:3d:18:
                    d5:5d:b4:0e:5c:20:79:87:a3:37:54:10:de:57:30:
                    e6:7a:d0:35:30:3c:da:84:a1:26:21:0c:50:97:f7:
                    17:2f:c1:ef:0c:08:a0:44:2d:db:96:28:54:fa:30:
                    ab:3d:76:56:5a:8f:dd:70:24:dd:b4:9c:75:0a:13:
                    64:80:94:db:0b:1c:46:40:fc:95:dc:3e:5f:dc:8d:
                    36:3f:e3:5f:e1:a0:71:a3:c2:15:47:a2:97:b1:04:
                    d6:20:f1:71:b4:3b:79:9c:e1:9e:d3:c0:14:93:6d:
                    ae:70:04:12:38:e7:b3:6c:ec:cc:2e:42:eb:e9:11:
                    10:b7:7b:c2:a9:c7:33:ff:2d:3b:0a:2b:98:b7:8f:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F0:98:58:CD:FA:8B:88:AB:27:8C:5D:48:8F:B2:0D:4E:B0:FC:A5
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:32:93:a2:6d:f8:e4:a3:4b:9c:72:58:a7:f1:de:d8:1a:17:
         69:ce:97:25:0a:14:e6:25:74:b7:d4:e7:d9:04:7d:32:56:bf:
         7e:83:ef:2b:b3:dc:cc:3e:e0:07:27:53:95:91:f5:b7:35:0b:
         70:d0:d3:02:0c:7e:ac:3c:32:f3:09:51:ee:86:4a:ae:1c:98:
         7e:98:bb:17:62:0f:48:83:e2:8e:dc:5a:e2:c7:6a:7b:9f:0b:
         b7:28:94:fb:d5:36:29:8e:41:f1:1f:6c:a9:36:89:0e:26:e7:
         28:81:59:a4:19:4e:d3:1c:b0:b9:e9:d1:5b:85:c7:a8:83:ce:
         f4:51:56:2c:6e:ac:f2:a3:66:5e:e7:56:45:ee:fe:75:73:b8:
         6a:44:7d:38:c3:c4:6d:da:e2:c9:72:69:67:3f:4b:d0:c5:32:
         53:aa:f1:cf:80:b2:13:3a:75:c5:54:29:91:66:16:5a:eb:a4:
         ac:14:27:84:27:96:22:07:d9:4d:e8:3c:a1:35:12:64:5e:fc:
         98:be:30:82:f5:24:52:93:b3:f8:d1:94:84:57:dc:25:d5:ec:
         63:e3:03:a8:1c:ee:3f:17:be:c2:09:85:f6:9b:38:93:fc:ba:
         2c:a9:99:96:0d:d2:2a:2d:2b:4a:65:91:be:75:4a:81:5d:bf:
         7e:c7:ad:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:54 2025 by rpki-client